File Search Engine
  • Search
  • Syntax
  • Fields
  • API
  • update.cloudsoftphone.com · latest.msi

    /app_updates/desktop_win/generic/alpha/desktopmsi/

    United States · DIGITALOCEAN-ASN

    Yara Office_OLE_DDE From Florian Roth by NVISO Labs

    SHA1: 501155c7d1ce6ba75727e368fc1cdf0231009b12
    SHA256: d755705628136217986c6d7a443cd56bf08c077f66c2e7def51ae9f0a21a9527
    application/octet-stream
    316.00MB
    2025-10-30 11:58:19 +0000 UTC

  • update.cloudsoftphone.com · Acrobits.CloudSoftphone-25.2.67.msi

    /app_updates/desktop_win/generic/alpha/desktopmsi/

    United States · DIGITALOCEAN-ASN

    Yara Office_OLE_DDE From Florian Roth by NVISO Labs

    SHA1: 634d329ae6c47d67976527e26b24c0e51dc5c585
    SHA256: b057e1a68a4407ce5bd57303194af7ce2b54490191ba93b61824a3401ffc10bd
    application/octet-stream
    316.00MB
    2025-10-30 11:58:19 +0000 UTC

  • update.cloudsoftphone.com · Acrobits.CloudSoftphone-25.2.67-x64.msi

    /app_updates/desktop_win/generic/alpha/desktopmsi/

    United States · DIGITALOCEAN-ASN

    Yara Office_OLE_DDE From Florian Roth by NVISO Labs

    SHA1: e1a650fab7066fce88517b5d8292d95651e67300
    SHA256: dd3483f2e529ff0c6213439b9a9c2bd879075dc39c476b1449a54fe3f7e0fa26
    application/octet-stream
    316.00MB
    2025-10-30 11:58:19 +0000 UTC

  • files.i-edu.ru · 21.zip

    /FGOS/

    Russia · Rostelecom

    Yara Office_OLE_DDE From Florian Roth by NVISO Labs

    SHA1: dafbfce8738fb16c781865a048de2f9419f8cd8d
    SHA256: 094ce4b1ceefe4adb873114fdcae2cb703ddc1ab8ea1e38ee17265e28c8bce62
    application/zip
    233.68MB
    2011-07-11 06:53:58 +0000 UTC

  • files.fernando.com.br · splunkforwarder-10.0.1-c486717c322b-windows-x64.msi

    /BNB/playbooks/

    United States · AS-VULTR

    Yara Office_OLE_DDE From Florian Roth by NVISO Labs
    Download archived sample
    The password is "infected"

    SHA1: f4b169ace1435ced5a2dc1d96e55e622a8ea241d
    SHA256: 93107d63cf646a00bc5e9687fdce1932ea858a586a9ae1d7131ef0a9281dc2bf
    application/octet-stream
    97.52MB
    1970-01-01 00:00:00 +0000 UTC

  • indiaaccess.co.in · backup_user-data_2010110632.zip

    /Plesk_backup/clients/Programme/domains/kvksurgujacg.org/

    United States · HOPONE-GLOBAL

    Yara GIFCloaked_Webshell_A From Florian Roth by Florian Roth (Nextron Systems)
    Yara Office_OLE_DDE From Florian Roth by NVISO Labs

    SHA1: ea022e84bafe81c88f4641e9238b6def3d66d451
    SHA256: 47f7d9d0f824aab84dd17e34934984bb505d33d811648b86efe751c72b383144
    application/zip
    707.48MB
    2020-10-12 16:07:22 +0000 UTC

  • soportetecnico.mig.com.mx · ZendStudio-8.0.0.msi

    /

    United States · AMAZON-AES

    Yara Office_OLE_DDE From Florian Roth by NVISO Labs

    SHA1: 51b397567b07028b07a408e9757b7eef65170146
    SHA256: 338c556c41ae03f9abfa1d1903dc253c2bdbd20a1ac015c2deb071317f088669
    application/octet-stream
    350.53MB
    2024-09-12 23:25:07 +0000 UTC

  • softvpn.mig.com.mx · ZendStudio-8.0.0.msi

    /

    United States · AMAZON-AES

    Yara Office_OLE_DDE From Florian Roth by NVISO Labs

    SHA1: 51b397567b07028b07a408e9757b7eef65170146
    SHA256: 338c556c41ae03f9abfa1d1903dc253c2bdbd20a1ac015c2deb071317f088669
    application/octet-stream
    350.53MB
    2024-09-12 23:25:07 +0000 UTC

  • 116.237.28.245 · OpenJDK21U-jdk_x64_windows_hotspot_21.0.3_9.msi

    /packages/OpenJDK/21/

    China · China Telecom Group

    Yara Office_OLE_DDE From Florian Roth by NVISO Labs

    SHA1: 101587cdcb94321988e8ccf4400ae27af8137458
    SHA256: 4cf5a6ad6cb8af59d3486d8318cc8874cbd6415b1c9b161b273e6bb48e8da636
    application/octet-stream
    171.36MB
    2024-07-05 00:44:19 +0000 UTC

  • 116.237.28.245 · OpenJDK17-jdk_x64_windows_hotspot_17_35.msi

    /packages/OpenJDK/17/

    China · China Telecom Group

    Yara Office_OLE_DDE From Florian Roth by NVISO Labs

    SHA1: 4212997b8a84bf4d7334c5d74845f530b636014f
    SHA256: 05cdd8f6c7d359195714ed57b14e710452be4e281fe8d6c98a0ed46131cc9ba5
    application/octet-stream
    160.74MB
    2021-10-26 12:43:05 +0000 UTC

  • 116.237.28.245 · OpenJDK17-jdk_x64_windows_hotspot_17_35.msi

    /packages/Minecraft/

    China · China Telecom Group

    Yara Office_OLE_DDE From Florian Roth by NVISO Labs

    SHA1: 273b827592ee94d74e0368c3fa4236c1c859e872
    SHA256: 2f7478884037f704247691a06ade0760eb5c0a453305175e9adac4f51a7bd747
    application/octet-stream
    160.74MB
    2021-10-26 12:43:05 +0000 UTC

  • 116.237.28.66 · OpenJDK17-jdk_x64_windows_hotspot_17_35.msi

    /packages/OpenJDK/17/

    China · China Telecom Group

    Yara Office_OLE_DDE From Florian Roth by NVISO Labs

    SHA1: 6bdb946b35e56c7c1f58da81ca6bd084e2a6d14a
    SHA256: eac8f2ef620b9ef149590cafc5fa821338d42909f99fb811693d8fb266fe83b4
    application/octet-stream
    160.74MB
    2021-10-26 12:43:05 +0000 UTC

  • 116.237.28.66 · OpenJDK17-jdk_x64_windows_hotspot_17_35.msi

    /packages/Minecraft/

    China · China Telecom Group

    Yara Office_OLE_DDE From Florian Roth by NVISO Labs

    SHA1: e9d23988f27773f9e1bf0cbf2429f8288a0d0542
    SHA256: eee2ddb03b1064ebdb05a5ad76e02b56d1663c3716dcab1b891f0be633d7de22
    application/octet-stream
    160.74MB
    2021-10-26 12:43:05 +0000 UTC

  • pcdoneright.net · pkit.zip

    /files/

    United States · IMH-IAD

    Yara Office_OLE_DDE From Florian Roth by NVISO Labs

    SHA1: 98e0a7bad499459aa0bc2d07a08604114075b177
    SHA256: 8b4d138e95d3739caf4add1ddc8041d80d0559babac2da9f90a777b3d3f11e8c
    application/zip
    368.11MB
    2025-03-05 16:52:44 +0000 UTC

  • downloads.mycure.md · syncbased_windows_amd64_5.137.71.msi

    /syncbase-old/

    Singapore · DIGITALOCEAN-ASN

    Yara Office_OLE_DDE From Florian Roth by NVISO Labs

    SHA1: 24baf33b3444144adb4e6ff592c485bde5286f09
    SHA256: 067f303a5f65408cd22a4093f14592376584dd6c25c5c60d1363cc0fa900e372
    application/octet-stream
    770.59MB
    2025-03-24 05:11:42 +0000 UTC

  • downloads.mycure.md · hapihub_windows_amd64_5.220.66.msi

    /hapihub/

    Singapore · DIGITALOCEAN-ASN

    Yara Office_OLE_DDE From Florian Roth by NVISO Labs

    SHA1: 6e64b0c5721d92d94cd1a2e8ae82057780da1a9f
    SHA256: 3291aa554b056264e15fa1a05593445995a74bf459070a180af384a541eeac83
    application/octet-stream
    668.50MB
    2025-04-10 13:06:22 +0000 UTC

  • file-container.misa.pw · QGIS-OSGeo4W-3.38.3-1.msi

    /

    · CLOUDFLARENET

    Yara Office_OLE_DDE From Florian Roth by NVISO Labs

    SHA1: 288d81afc6a7afc2d399251a635024c12d2b17cb
    SHA256: 2271aec5ebe9ab21311591a190d0a8adb7234fcb22a6432a01d3f5dfbce108f7
    application/x-msdownload
    1.19GB
    2024-09-15 00:03:50 +0000 UTC

  • soportetecnico.mig.com.mx · ZendStudio-8.0.0.msi

    /

    United States · AMAZON-AES

    Yara Office_OLE_DDE From Florian Roth by NVISO Labs

    SHA1: 51b397567b07028b07a408e9757b7eef65170146
    SHA256: 338c556c41ae03f9abfa1d1903dc253c2bdbd20a1ac015c2deb071317f088669
    application/octet-stream
    350.53MB
    2024-09-12 23:25:07 +0000 UTC

  • softvpn.mig.com.mx · ZendStudio-8.0.0.msi

    /

    United States · AMAZON-AES

    Yara Office_OLE_DDE From Florian Roth by NVISO Labs

    SHA1: 51b397567b07028b07a408e9757b7eef65170146
    SHA256: 338c556c41ae03f9abfa1d1903dc253c2bdbd20a1ac015c2deb071317f088669
    application/octet-stream
    350.53MB
    2024-09-12 23:25:07 +0000 UTC

  • download.lierfang.com · virt-viewer-x64-8.0.msi

    /pxvdi/Extra/virt-viewer/

    China · China Mobile Communications Group Co., Ltd.

    Yara Office_OLE_DDE From Florian Roth by NVISO Labs
    Download archived sample
    The password is "infected"

    SHA1: 9cfec6c30b8b976cff14aaac654ee25a8248a790
    SHA256: 282ff03ec046081243f14140fb2ad9dcc6b1c85ebff78db66b4dece8e258d78d
    application/octet-stream
    73.14MB
    2024-10-28 06:47:43 +0000 UTC